XCreds Setup with Azure OIDC - Jukelyn/xcreds GitHub Wiki
XCreds Setup with Azure OIDC
example mobile config here. builds here
-
In azure, create an app registration, give it a name and a redirect URI of type Mobile with a value of "xcreds://auth/" and select Register. Do not forget the trailing slash in the redirect URI.
-
Once the app is created, note the Application (client) ID and the Directory (tenant) ID:
-
Install the XCreds app and launch it. Open the preferences from the menu bar:
-
Enter the client and DiscoveryURL into the preferences of the app. Specify the discovery URL by adding in the tenant id from above into the Azure DiscoveryURL. For example, for tenant id e64a2b5d-3eb1-436e-9e8a-521f0c5cd489, the DiscoveryURL would be:
-
To give users access to the app, go to Azure AD->Enterprise Applications->xcreds and select Assign users and groups:
-
Select Add user/group:
-
Select users to add:
-
Select Assign to assign users to the application:
-
Select Sign-in from menu item:
-
A web view will appear. Enter in a valid user and authenticate:
-
The first time logging in, accept the application:
-
Look in the app preferences and verify you have tokens:
-
Verify the token is still valid (and the Azure password has not changed) by selecting Check Token from them menu item and a success message should appear.